Sub-processors
Axys Analysis uses the following third-party sub-processors to deliver its services.
Last updated: 9 August 2026
We will update this page at least 30 days before adding or replacing any sub-processor that processes personal data.
| Sub-processor | Purpose | Data processed | Location | Link |
|---|---|---|---|---|
| Supabase | Database, authentication, file storage | All candidate and user data, assessment results, uploaded files | United States (AWS us-east-1) | Privacy policy |
| Vercel | Application hosting and edge delivery | IP addresses, request metadata | United States / Global CDN | Privacy policy |
| Stripe | Payment processing and billing | Billing information, subscription data | United States | Privacy policy |
| Anthropic | AI-powered assessment question generation and scoring | Job description text; open-ended answer text submitted for scoring | United States | Privacy policy |
| Loops | Transactional email delivery | User name, email address | United States | Privacy policy |
| Upstash | Rate limiting and caching | Anonymised request identifiers | United States | Privacy policy |
| Sentry | Error monitoring and diagnostics | Error stack traces, anonymised user identifiers | United States | Privacy policy |
| PostHog | Product analytics | Anonymised usage events, feature interaction data | United States (PostHog Cloud US) | Privacy policy |
| Inngest | Background job orchestration (assessment scoring, ATS delivery, retention enforcement, billing checks, scheduled emails) | Candidate, result, and organisation identifiers; job payloads reference and act on real candidate/org data server-side | United States | Privacy policy |
| Cloudflare (R2) | Encrypted off-site database backups for disaster recovery | Full database backup, including all candidate and user data, on a rolling 30-day retention basis | United States | Privacy policy |
To object to the addition of a new sub-processor, contact privacy@axysanalysis.com.